What is Claimed is : 

1 . A method for authenticating a Web session comprising: 
receiving a user ID; 

computing a message digest of the user ID; 
computing an expiration timestamp for the session; 
selecting an index number; 

combining the message digest and expiration timestamp; 

accessing an encryption key using the index number; 

encrypting the combined message using the accessed encryption key; and 

converting the encrypted message into an ASCII string. 

2. The method of claim 1, wherein the step of combining the message digest 
and expiration timestamp more specifically includes concatenating the message digest 
and expiration timestamp. 

3. The method of claim 1 , further comprises passing the ASCII string to a 
remote computer using an FTP (file transport protocol) URL (uniform resource locator) 
within an HTML (hyper-text markup language) page, the FTP URL being of the form 
ftp://ID:ASCII@hostname, wherein ID is the user ID and ASCII is the ASCII string. 

4. The method of claim 1 , wherein the step of receiving the user ID more 
specifically comprises receiving the user ID through an HTML (hyper-text markup 
language) page that is communicated from a remote client browser. 
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5 . The method of claim 1 , wherein the step of computing a message digest of 
the user ID more specifically comprises computing a four-byte binary value which is an 
encoded form of the user ED. 

6 . The method of claim 1 , wherein the step of computing an expiration 
timestamp more specifically comprises computing an expiration timestamp in Epoch 
format. 

7. The method of claim 1 , wherein the step of selecting an index number 
more specifically comprises generating a random number within a predefined range of 
values. 

8. The method of claim 1 , wherein the step of accessing the encryption key 
more specifically comprises retrieving an encryption key from a storage segment 
containing a plurality of encryption keys, wherein the retrieved encryption key is obtained 
from a location or position within the storage segment based upon the index number. 

9. The method of claim 1 , wherein the step of encrypting the combined 
message more specifically comprises encrypting the combined message digest and 
timestamp into an eight-byte binary value. 
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10. The method of claim 1, further comprising the step of concatenating the 
index number to the encrypted message. 

1 1 . The method of claim 1 , wherein the step of converting the encrypted 
message into an ASCII string more specifically comprises using a "printf ' command. 

1 2 . The method of claim 1 , wherein the step of converting the encrypted 
message into an ASCII string more specifically includes converting the encrypted 
message into a hexadecimal value. 

1 3 . The method of claim 1 0, wherein the step of converting the encrypted 
message into an ASCII string more specifically comprises converting the encrypted 
message and the index number into an ASCII string using a "printf command. 

1 4. The method of claim 3, further including the step of passing the index 
number to the remote computer. 

1 5 . The method of claim 14, wherein the step of passing the index number to 
the remote computer more specifically comprises passing the index number to the remote 
computer separate from the ASCII string. 



33 



1 6. The method of claim 14, wherein the step of converting the encrypted 
message into an ASCII string more specifically comprises converting a combination of 
the encrypted message and the index number into an ASCII string, wherein the index 
number is communicated to the remote computer as a part of the ASCII string. 

1 7. A system for authenticating a transaction comprising: 
logic configured to receive a user ID; 

logic configured to compute a message digest of the user ID; 
logic configured to select an index number; 

logic configured to combine the message digest with expiration timestamp; 

logic configured to select an encryption key from a plurality of encryption keys 
using the index number; 

logic configured to encrypt the combined message using the selected encryption 
key; and 

logic configured to convert the encrypted message into an ASCII string. 

1 8. The system of claim 17, further including logic configured to generate an 
expiration timestamp. 

19. The system of claim 17, further including logic configured to 
communicate the ASCII string to a remote computer. 
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20. The system of claim 17, further including a local memory for storing the 
plurality of encryption keys. 

21. A method for authenticating a transaction comprising: 
computing a message digest of a user ID; 

selecting an index number; 

selecting an encryption key from a plurality of encryption keys using the index 
number; 

encrypting the message digest using the selected encryption key; and 
converting the encrypted message into an ASCII string. 

22. The method of claim 21, further comprising: concatenating the message 
digest with an expiration timestamp, wherein the step of encrypting the message more 
specifically includes encrypting the concatenated message using the accessed encryption 
key. 

23 . The method of claim 2 1 , wherein the step of selecting the encryption key 
more specifically includes retrieving the encryption key from a local memory based on 
the index number. 

24. The method of claim 2 1 , further including the step of communicating the 
ASCII string to a remote computer. 
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25 . The method of claim 2 1 , further including the step of communicating the 
ASCII string to a person through voice communication. 

26. The method of claim 21 , further including the step of printing the ASCII 
string onto a ticket. 

27. The method of claim 26, wherein the ticket is one selected from the group 
consisting of an airline ticket, a concert ticket, an employee ID card, and an event ticket. 

28. The method of claim 26, wherein the step of printing the ASCII string onto 
a ticket more specifically includes printing the ASCII string onto the ticket in a form that 
it may be later electronically scanned for verification. 
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